IT RISK AND COMPLIANCE SPECIALIST, HIBRIDO

IT Risk and Compliance Specialist
We are looking for an IT Risk and Compliance Sr. Specialist to join our IT Analytics Data and Integration (ADI) stream in Barcelona.

Position Snapshot
Work location: Barcelona
Type of Contract: Permanent
Stream: IT Analytics Data and Integration
Type of Work: Hybrid
Work Language: Fluent Business English

The role
We are looking for an IT Risk and Compliance Sr. Specialist, responsible for maintaining, supporting, and continuously improving the current compliance and security management systems (ISMS) in our Product based organization. The role is part of the transversal Operations team working closely with all Product Groups in the organization, yet the new candidate will work closely with the Security Stream and collaborate with the Markets when needed.

What youll do
Be responsible for implementing, Coaching, Reporting, and continuously improving Risk, Compliance Security through the Nestlé Compliance and Information Security Management System.
Support the implementation of Compliance Frameworks for new Products (i.e. ISMS RAs, Archer Controls, Compliance Enabler Network SPOCs).
Support Risk identification and controls mapping for all solutions and processes in product groups and other IT teams using the Nestlé Security, Risk Compliance framework and management systems.
Coach and develop teams in identifying and managing Risk, Compliance Security gaps through documented corrective preventative actions, tracking them through the Risk Management System (Archer).
Be responsible for tracking the various Security and compliance KPIs and taking action when needed with the different Product Groups and other IT teams if it is required.
Lead and drive internal and external audits as well as Internal independent reviews: preparing and coordinating all impacted teams.
Maintenance of ISMS documentation as well as preparation and execution of the Risk Assessment exercises, following the ISMS framework.
Be the Stream Ambassador of all security-related matters, helping bring this topic to the forefront of the conversation. Become the single point of contact within the different Product Groups when they have questions or concerns related to Security and/or Compliance, as well as with other IT Teams.
Being aware and connected to different ways of working and championing change towards a more productive operation model in this area.
Govern the application portfolio flow and ensure all applications are meeting the security and compliance standards.

We offer you
We offer more than just a job. We put people first and inspire you to become the best version of yourself!
Great benefits including salary and a comprehensive social benefits package. We have one of the best pension plans on the market, as well as flexible remuneration with tax advantages: health insurance, restaurant card, mobility plan, etc.
Personal and professional growth through ongoing training and constant career opportunities reflecting our conviction that people are our most important asset.
Hybrid working environment with a flexible working scheme. Our state-of-the-art campus is dog-friendly and equipped with a medical center, canteen, and areas to co-create, network, and chill!
Recreation activities such as yoga, Zumba, etc., and a wide range of volunteering activities.

Join our global team of IT professionals at Nestlé, driving daily innovation and leveraging cutting-edge technologies to address digital opportunities. Grow professionally in a dynamic and impactful environment, collaborating with business partners worldwide to deliver integrated technology solutions!

What will make you a great fit
Bachelors Degree in the field of Computer Science, Law, IT Security, Quality Management or Business Administration.
7+ years of experience in a combination of Risk Management, Compliance, Information Security and IT jobs.
Industry-related Compliance, Risk or Security Management Certification is preferred.
Experience in preparing, running/facilitating Risk Assessments.
Being exposed to Audits (Internal and External) and how to run them effectively.
Demonstrated ability to apply IT-related knowledge and experience in solving compliance issues.

Not a 100 match? No worries! Nestlé supports your personal growth with customized development solutions.

Ciberseguridad,

Ciberseguridad,